Trello
15M user records scraped via API
2024 Data Breaches (927 indexed)
Jason's Deli
345K customer records compromised in credential stuffing
Trillium Health Partners (Ontario)
420K patient records compromised in ransomware attack
Select Medical Holdings
380K patient records from rehabilitation hospitals exposed via compromised EHR vendor
Wollongong City Council (Australia)
Ransomware disrupted council services — resident data at risk
Tokyo Metropolitan Government
System configuration error exposed personal data of 2,600 project participants
Atlassian (Confluence breach)
3.2M workspace records exposed via CVE exploitation
SoFi
240K customer records exposed via third-party vendor
Discord (Third-Party Leak)
600M user messages and metadata scraped and posted to dark web marketplace
City of Savannah GA
Ransomware disrupted city services
Regal Medical Group
3.3M patient records exposed in data exfiltration incident
Cravath Swaine & Moore LLP
SEC insider trading investigation — Chinese hackers targeted deal data in M&A cases
Sam's Club
90K customer records exposed in credential stuffing
Hathway
4,670,080 records exposed — Device information, Email addresses, IP addresses, Names and 5 more
Edmonds School District (WA)
14K student records exposed in data breach
University of California system
3.4M student and staff records exposed via MOVEit
LCBO (Ontario)
Customer credit card data skimmed via Magecart web injection on provincial liquor retailer
Vietnam Social Security (VNPT)
5M citizen records exposed from government social security system
Ivanti
Multiple zero-day VPN vulnerabilities exploited by Chinese APT
Ivanti VPN (Multiple Victims)
Critical zero-day chain exploited by state-sponsored actors — CISA emergency directive
Montefiore Medical Center
260K patient records stolen by insider threat employee
Ivanti VPN (CVE-2024-21887)
Chinese state hackers mass-exploited Ivanti VPN zero-days — 1,700+ organizations breached
Ivanti (Pulse Secure)
Chinese APT exploited VPN zero-days affecting thousands of organizations
Flair Airlines (Canada)
Internal systems compromised — pilot training and scheduling data exposed